October 2004
-
October 28, 2004
28
Oct'04
VoIP security, 'spit' concern experts
A rise in enterprises using VoIP technology has highlighted security and spam concerns. Continue Reading
-
October 28, 2004
28
Oct'04
Week 45: Firewall security tips
When your organization's networks are connected to the Internet without adequate security measures, you are vulnerable to attack. Continue Reading
-
October 25, 2004
25
Oct'04
Check 21: A classic case of risk
Risk is all about trade-offs, in this case cost-effectiveness versus security. Continue Reading
-
October 25, 2004
25
Oct'04
How does the removal of WinPcap library impact malicious use of scanning software?
-
October 20, 2004
20
Oct'04
Determining false positives on a new IDS
-
October 18, 2004
18
Oct'04
What more is there to say about SOX?
As the deadline for SOX quickly approaches, organizations should keep in mind the value of a good pre-audit. Continue Reading
-
October 14, 2004
14
Oct'04
Information Security Decisions Fall 2004: Speaker presentations
Download the fall 2004 speaker presentations from Information Security Decisions. Continue Reading
-
October 14, 2004
14
Oct'04
Microsoft sets new Patch Tuesday record
Microsoft's flurry of security bulletins this week made October the busiest patch month on record. That's particularly bad news if you're running an older version of Windows. Continue Reading
-
October 14, 2004
14
Oct'04
Week 43: Permissions -- How world-writeable are you?
Files, directories and devices that can be modified by any user are known as "world–writable" and are dangerous security holes. Continue Reading
-
October 13, 2004
13
Oct'04
Top six steps for a secure Web server
Looking for a secure Web server checklist? You're in luck. In this tip, Mike Chapple provides six simple actions you can take to make your Web server more secure. Continue Reading
-
October 12, 2004
12
Oct'04
Benefits of encryption: Improving your enterprise IT security structure
Learn the benefits of encryption and how it can be one of the only true secure ways to protect your enterprise. Continue Reading
-
October 11, 2004
11
Oct'04
Keys to the CISO office
Security managers can benefit from lessons learned by the CISO of JPMorganChase. Continue Reading
-
October 08, 2004
08
Oct'04
ISD Conference '04: Regulatory compliance in the real world
The best way to meet "squishy" security provisions in regulations like Sarbanes-Oxley is to match appropriate controls against anticipated threats and create a defensible case to support those decisions. Continue Reading
-
October 06, 2004
06
Oct'04
302 and 404: Key SOX requirements for security managers.
SOX is mandatory for most public corporations and focuses on regulating corporate behavior to protect financial audit records. Read about the three main areas of SOX that affect IT: Sections 302, 404 and 802. Continue Reading
-
October 06, 2004
06
Oct'04
'Typical' SOX violations
Sarbanes-Oxley contains many features, but there are two that stand out from an IT security perspective. Continue Reading
-
October 06, 2004
06
Oct'04
Sarbanes-Oxley Act: You ready yet?
As the Nov. 15 deadline nears, companies find there's more to meeting compliance than they thought. Think Y2K, on steroids. Continue Reading
-
October 06, 2004
06
Oct'04
Spyware vs. spyware: Employer and employee monitoring
What rights and responsibilities do employers and employees have when monitoring others' use of company systems? Continue Reading
-
October 05, 2004
05
Oct'04
Key security policy elements
CISSP Thomas Peltier provides seven essential elements for defining sound language to outline a security policy's topic, scope, responsibilities and compliance requirements. Continue Reading
-
October 04, 2004
04
Oct'04
Schneier: Microsoft still has work to do
In the first of a two-part Q&A, security luminary Bruce Schneier tries to separate threats from hype and explains why using Internet Explorer is "foolish." Continue Reading
-
October 04, 2004
04
Oct'04
Lesson/Domain 2 -- Security School: Training for CISSP Certification
SearchSecurity.com Security School webcasts are focused on CISSP training. Each lesson corresponds to a specific domain in the CISSP exam's "Common Body of Knowledge." Continue Reading